Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/D1OlZTmZPvi_xesE4z-Mf4DzyJg.roa
File: D1OlZTmZPvi_xesE4z-Mf4DzyJg.roa (raw, json)
Hash identifier: adZSK5IIpZu1FQiYwfjKnxTUPmzbPv/EB3P8RBz7/8E=
Subject key identifier: 0F:53:A5:65:39:99:3E:F8:BF:C5:EB:04:E3:3F:8C:7F:80:F3:C8:98
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 018C0BEC8E23F906CE50AD2536DAB9B60539
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/D1OlZTmZPvi_xesE4z-Mf4DzyJg.roa
Signing time: Sun 26 Nov 2023 13:58:21 +0000
ROA not before: Sun 26 Nov 2023 13:58:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34397
IP address blocks: 213.181.190.0/24 maxlen: 24
212.107.97.0/24 maxlen: 24
212.107.96.0/19 maxlen: 19
212.107.99.0/24 maxlen: 24
212.107.103.0/24 maxlen: 24
212.107.105.0/24 maxlen: 24
212.107.106.0/24 maxlen: 24
213.181.160.0/19 maxlen: 19
213.210.196.0/24 maxlen: 24
213.210.192.0/18 maxlen: 18
213.210.195.0/24 maxlen: 24
213.210.216.0/24 maxlen: 24
89.5.220.0/23 maxlen: 23
89.5.220.0/24 maxlen: 24
88.213.64.0/18 maxlen: 18
88.213.72.0/21 maxlen: 21
212.119.93.0/24 maxlen: 24
212.119.92.0/23 maxlen: 23
212.119.92.0/24 maxlen: 24
85.129.128.0/17 maxlen: 17
85.129.164.0/22 maxlen: 22
88.213.126.0/23 maxlen: 23
212.119.64.0/20 maxlen: 20
212.119.64.0/24 maxlen: 24
212.119.69.0/24 maxlen: 24
212.119.74.0/24 maxlen: 24
212.119.81.0/24 maxlen: 24
212.119.80.0/21 maxlen: 21
212.119.82.0/24 maxlen: 24
212.119.88.0/22 maxlen: 22
93.98.0.0/16 maxlen: 16
212.71.37.0/24 maxlen: 24
212.71.32.0/24 maxlen: 24
212.71.32.0/19 maxlen: 19
212.71.35.0/24 maxlen: 24
212.71.33.0/24 maxlen: 24
89.4.0.0/15 maxlen: 15
79.172.128.0/18 maxlen: 18
88.213.0.0/18 maxlen: 18
93.98.127.0/24 maxlen: 24
88.213.6.0/24 maxlen: 24
212.71.42.0/24 maxlen: 24
212.71.41.0/24 maxlen: 24
212.71.51.0/24 maxlen: 24
212.71.53.0/24 maxlen: 24
212.118.96.0/19 maxlen: 19
212.118.100.0/24 maxlen: 24
212.118.102.0/24 maxlen: 24
212.118.107.0/24 maxlen: 24
212.118.106.0/24 maxlen: 24
212.118.108.0/22 maxlen: 22
212.118.115.0/24 maxlen: 24
212.118.119.0/24 maxlen: 24
212.118.124.0/24 maxlen: 24
212.118.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0b:ec:8e:23:f9:06:ce:50:ad:25:36:da:b9:b6:05:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Nov 26 13:58:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f53a56539993ef8bfc5eb04e33f8c7f80f3c898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0e:a9:1d:e4:06:8e:9f:eb:6e:e6:43:17:9b:
d3:8d:58:3b:29:d3:9c:65:a8:d7:e4:0d:4a:69:35:
8c:b3:a1:cc:21:5d:b8:2e:76:15:6f:69:be:0c:10:
3b:04:f0:05:40:61:8c:31:9e:14:19:4e:80:fb:31:
cc:97:27:c3:37:82:64:e0:8a:3e:f7:08:61:33:46:
2d:1c:f5:56:be:02:e0:76:e3:e0:d0:39:54:a9:00:
e9:74:cc:01:0f:a1:cb:c8:f4:e2:90:7a:99:83:22:
ad:1a:49:fd:d4:03:16:cf:2e:be:9b:57:32:f5:c3:
ad:3b:03:f1:2b:a5:a5:fa:a3:01:fd:f3:3e:7c:e8:
14:84:50:6e:13:f7:96:5c:9a:1f:84:77:0f:22:5e:
26:96:83:d1:28:62:ed:fb:ee:3f:f4:b2:22:af:27:
b1:40:dd:ce:f4:df:02:02:11:87:ac:b5:d5:f9:aa:
1f:3d:61:da:c7:72:90:54:5a:a2:43:ab:4e:d4:be:
10:f2:cc:ff:95:d9:74:e6:9b:f0:6b:2f:fe:ad:2b:
94:b7:16:14:5a:11:b4:26:f2:81:69:4c:35:25:03:
0d:e8:dd:a0:9e:23:5e:3b:4d:f1:78:3c:8d:4c:eb:
91:17:3d:32:47:c4:a3:f9:cc:08:23:e0:37:da:85:
38:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:53:A5:65:39:99:3E:F8:BF:C5:EB:04:E3:3F:8C:7F:80:F3:C8:98
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/D1OlZTmZPvi_xesE4z-Mf4DzyJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.128.0/18
85.129.128.0/17
88.213.0.0/17
89.4.0.0/15
93.98.0.0/16
212.71.32.0/19
212.107.96.0/19
212.118.96.0/19
212.119.64.0-212.119.93.255
213.181.160.0/19
213.210.192.0/18
Signature Algorithm: sha256WithRSAEncryption
65:d6:7b:9a:d7:3e:f9:a3:72:07:78:52:b2:10:38:c4:f1:e0:
c4:05:62:10:a6:01:a1:e1:67:e5:45:46:04:4f:62:fe:11:b5:
b1:86:fb:e0:44:e0:4c:d2:97:d1:a7:64:94:89:af:f1:cf:52:
da:78:af:40:c1:b1:98:b6:b1:ff:22:d4:b1:24:db:c8:2a:31:
ca:75:6b:d8:46:be:c5:b1:c5:6e:0f:92:bf:13:05:6b:30:0c:
b6:cf:56:0a:35:44:51:8f:a8:ae:41:88:98:89:2b:d3:90:37:
00:1f:4f:fa:17:c9:d5:f6:e1:29:84:bd:68:f4:d9:91:01:d6:
e4:57:2d:16:9f:b7:a8:3c:0b:9d:67:86:ef:a5:5c:98:a5:8a:
4a:a4:6c:88:46:7e:b8:68:46:91:c2:af:89:66:03:f3:82:f4:
54:0b:3d:42:d2:91:9a:cb:11:5f:86:6e:c3:53:33:89:ae:39:
b6:82:4b:8c:02:39:a9:25:fd:8c:9e:02:90:5d:28:41:20:27:
65:49:7d:e5:05:ab:f7:ce:3b:05:b8:df:d8:54:57:5b:7d:4d:
19:f2:4a:b7:31:6d:dc:f1:7f:25:ef:26:e6:c5:b5:55:d3:f4:
cd:b4:28:8f:56:a0:6e:40:03:2c:a8:ed:99:43:70:31:03:e2:
ce:a1:c5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:10 2024 by rpki-client on console-ams.rpki-client.org